$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa File: bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa (raw, json) Hash identifier: 6f0lYpKg2a4FJWg6msSQxWGGWL+R3FYO4G1MnN/uxLY= Subject key identifier: 79:C6:63:00:49:4F:D2:96:FC:1E:ED:39:23:9A:3D:1B:8F:AC:0B:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A8CD208D83AB16C58D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa Signing time: Tue 10 Mar 2026 14:28:42 +0000 ROA not before: Tue 10 Mar 2026 14:28:42 +0000 ROA not after: Mon 08 Jun 2026 14:28:42 +0000 asID: 396575 IP address blocks: 2001:503:d414::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a8:cd:20:8d:83:ab:16:c5:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:42 2026 GMT Not After : Jun 8 14:28:42 2026 GMT Subject: CN=28c58bac-7dd9-4fb2-ae99-8836cdf3419b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:f8:5b:55:d1:9b:26:71:8a:d5:e0:1a:be: e7:11:8a:c5:8b:c2:c5:2a:18:d5:da:4c:4a:51:f4: 3d:b8:d7:8b:38:01:e2:67:e9:3c:80:04:38:6f:64: 05:89:4d:a9:67:97:af:d7:66:2a:90:b8:90:cd:76: b9:de:39:5b:c9:b0:9a:ba:7c:17:c9:24:59:31:dd: fc:e3:34:39:eb:e1:36:12:6b:e3:cd:25:4f:d1:47: ac:45:e3:92:cc:a7:da:cf:25:fc:c4:20:f5:3e:de: 44:b3:e5:27:9f:1f:93:69:cb:eb:b7:49:e9:56:a1: 17:ab:36:c1:c7:f3:1d:40:10:28:0b:c4:db:5c:de: d7:2a:13:51:d3:14:74:44:2c:e5:41:0e:88:75:79: 19:c9:87:ee:05:53:7d:68:42:f7:ba:a4:7b:2e:25: a2:9e:8e:e0:8c:f3:17:6f:ca:ce:84:91:7e:79:14: c7:25:34:bf:5d:f5:e0:46:7f:ef:c1:a8:60:58:f2: 8f:18:d4:54:9a:0b:69:fa:00:3e:5e:f6:e8:cd:fa: ac:b8:5a:ba:92:23:14:02:c1:bc:b2:48:23:aa:9d: b8:4d:eb:25:75:79:d6:62:3d:2a:e6:3f:b6:83:ec: 9c:de:fa:2f:6e:a9:1a:af:bb:3f:56:34:72:7b:9d: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C6:63:00:49:4F:D2:96:FC:1E:ED:39:23:9A:3D:1B:8F:AC:0B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bac85417-b5b2-3ea2-8517-42d4cd3e25c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e2:96:b4:42:4f:61:01:8c:24:f2:d7:16:46:80:ae:c4:1f: bd:75:60:6a:49:53:3c:e8:43:59:5e:1d:29:4e:a7:c1:ab:b7: 21:61:c2:10:f8:5a:a9:53:e4:20:16:ca:05:3a:83:01:f0:c4: c4:a7:ed:d9:ce:ef:cf:c8:21:00:31:31:b6:af:51:b0:b2:4c: 26:9f:21:1b:de:3f:d8:3e:78:7e:f7:d5:82:76:d2:91:87:6e: 77:ad:df:6e:75:8f:ee:64:fa:c8:70:6c:3e:ca:a0:2a:ba:0b: 8d:47:02:8b:83:f3:a3:c1:ac:ed:6c:07:31:c4:3c:35:36:5f: 12:69:1b:0c:89:4f:61:8d:98:92:6b:ad:0d:00:db:a5:b1:58: 28:cd:d5:cd:72:87:d3:23:4e:35:9b:be:c1:9e:e3:20:2f:91: dd:98:8b:cb:14:2a:5a:91:11:90:db:87:1b:6a:5c:52:91:0e: a3:eb:e5:e4:03:8a:0f:0c:78:14:f7:95:a2:df:c2:4b:f5:f0: f1:05:cd:9d:48:3c:ae:5b:3f:1c:ad:c3:32:5c:e2:d9:eb:11: b6:07:13:11:f1:f7:1e:7a:48:2e:0e:4a:93:f2:24:bc:5e:57: 35:b6:a6:78:e4:df:0d:75:6f:b1:77:5e:c1:90:a8:77:8a:e2: fa:ec:6b:ab -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fdajNII2DqxbFjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MloXDTI2MDYwODE0Mjg0MlowLzEtMCsGA1UEAxMk MjhjNThiYWMtN2RkOS00ZmIyLWFlOTktODgzNmNkZjM0MTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEL4W1XRmyZxitXgGr7nEYrFi8LFKhjV2kxK UfQ9uNeLOAHiZ+k8gAQ4b2QFiU2pZ5ev12YqkLiQzXa53jlbybCaunwXySRZMd38 4zQ56+E2EmvjzSVP0UesReOSzKfazyX8xCD1Pt5Es+Unnx+Tacvrt0npVqEXqzbB x/MdQBAoC8TbXN7XKhNR0xR0RCzlQQ6IdXkZyYfuBVN9aEL3uqR7LiWino7gjPMX b8rOhJF+eRTHJTS/XfXgRn/vwahgWPKPGNRUmgtp+gA+XvbozfqsuFq6kiMUAsG8 skgjqp24TesldXnWYj0q5j+2g+yc3vovbqkar7s/VjRye51QyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHnGYwBJT9KW/B7tOSOaPRuPrAsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFjODU0MTctYjViMi0z ZWEyLTg1MTctNDJkNGNkM2UyNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAS4pa0Qk9hAYwk8tcWRoCuxB+9dWBqSVM86ENZ Xh0pTqfBq7chYcIQ+FqpU+QgFsoFOoMB8MTEp+3Zzu/PyCEAMTG2r1GwskwmnyEb 3j/YPnh+99WCdtKRh253rd9udY/uZPrIcGw+yqAquguNRwKLg/OjwaztbAcxxDw1 Nl8SaRsMiU9hjZiSa60NANulsVgozdXNcofTI041m77BnuMgL5HdmIvLFCpakRGQ 24cbalxSkQ6j6+XkA4oPDHgU95Wi38JL9fDxBc2dSDyuWz8crcMyXOLZ6xG2BxMR 8fceekguDkqT8iS8Xlc1tqZ45N8NdW+xd17BkKh3iuL67Gur -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:03 2026 by rpki-client